❖ Browsing media by libreplanet
Securely backing up GPG private keys… to the cloud?
Joey Hess
Imagine a world in which GnuPG was not hard to use, and was used widely: users exchange encrypted email, gpg signed comments on websites, make encrypted backups, and so on. What happens, in that world, when a user's gpg private key gets deleted? The only backup is encrypted with the lost private key. Catch 22. We're not in that world, and so we don't often worry about this problem, but solving the gpg key backup problem seems a necessary step in the path toward that world. Keysafe is an attempt at taking that step, backing up to the cloud. Can this possibly be secure? Come and find out.